CVE-2026-100522 | Cotonti up to 1.0.0 message.php lng cross site scripting

September 26, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Cotonti up to 1.0.0. This affects an unknown function of the file message.php. The manipulation of the argument lng leads to cross site scripting.

This vulnerability is referenced as CVE-2026-100522. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More